We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
"FOSSA is not cheap."
At Accurics™, we envision a world where organizations can innovate in the cloud with confidence. Our mission is to enable cyber resilience through self-healing as organizations embrace cloud native infrastructure. The Accurics platform self-heals cloud native infrastructure by codifying security throughout the development lifecycle. It programmatically detects and resolves risks across Infrastructure as Code before infrastructure is provisioned, and maintains the secure posture in runtime by programmatically mitigating risks from changes. Accurics enables organizations of all sizes to achieve cloud cyber resilience through free cloud-based and open source tools such as Terrascan™.
FlexNet Code Insight is a single integrated solution for open source license compliance and security. Find vulnerabilities and remediate associated risk, while you build your products and during their lifecycle. Manage open source license compliance. And add automation to your processes and implement a formal OSS strategy and policy that balances business benefits and risk management.
FlexNet Code Insight is ranked 10th in Software Composition Analysis (SCA) with 1 review while FOSSA is ranked 6th in Software Composition Analysis (SCA) with 7 reviews. FlexNet Code Insight is rated 4.0, while FOSSA is rated 8.6. The top reviewer of FlexNet Code Insight writes "A decent web interface for reports, but the snippet style code matching requires too much effort". On the other hand, the top reviewer of FOSSA writes "Compatibility with a wide range of dev tools, web and "C-type", enables us to scan across our ecosystem, including legacy software". FlexNet Code Insight is most compared with WhiteSource, Black Duck and Veracode Software Composition Analysis, whereas FOSSA is most compared with Black Duck, WhiteSource, Snyk, Sonatype Nexus Lifecycle and JFrog Xray.
See our list of best Software Composition Analysis (SCA) vendors.
We monitor all Software Composition Analysis (SCA) reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.